Sr Manager, Cybersecurity

Workday•Pleasanton, CA

12d•$182,400 - $324,000•Hybrid

About The Position

Workday is seeking a senior technical leader to lead and mature its highly visible Security Incident Response function. The role supports major cybersecurity events and strengthens trust and resilience across Workday. It calls for technical leadership in incident response, security automation, systems and network security, threat hunting, digital forensics, and modern AI-enabled security capabilities, as well as experience scaling response programs and improving people, processes, and technology. The position operates across Workday’s internal architecture and multi-cloud enterprise environment and requires sound judgment in high-pressure situations. The role oversees day-to-day security operations, leads and develops cybersecurity engineers, establishes team goals and metrics, advises senior leadership, and helps shape Workday’s response program and platform. It also involves developing automation, evaluating tools and techniques, partnering with risk, legal, and compliance teams, driving remediation, and leading or coordinating incident triage, containment, investigation, and post-incident reviews. Workday offers a hybrid and flexible work model.

Requirements

10+ years of experience in cybersecurity or information security roles.
3+ years of experience leading and developing security teams.
Bachelor’s degree.
Strong technical leadership presence, with the ability to set direction, build credibility, and motivate high-performing teams.
Deep expertise in security incident response, including demonstrated experience leading or significantly contributing to complex investigations and major security events.
Engineering mindset and experience improving security operations through automation, orchestration, and scalable technical solutions.
Pragmatic approach to security that balances risk reduction with business enablement.
Structured problem-solving, sound judgment, and effective decision-making in fast-paced environments.
Track record of delivering security improvements in complex, fast-paced environments.
Excellent communication skills and ability to influence and build trust across technical and non-technical teams.
Ability to communicate and influence at senior leadership levels, including presenting to directors, VPs, and/or C-level stakeholders.
Ability to drive multiple projects and priorities while managing operational responsibilities.
Experience collaborating across global or distributed teams.
Success designing, implementing, and maturing security programs at scale in complex, fast-moving environments such as cloud-native, SaaS, or large enterprise settings.

Nice To Haves

Hands-on or leadership experience in one or more of the following: security operations (SOC); incident response and forensics; cloud security (AWS, Azure, or GCP); security automation and orchestration; designing and implementing security solutions; designing and implementing agentic AI security solutions; or application/product security and secure development practices.

Responsibilities

Oversee day-to-day security operations within the Security Incident Response team.
Lead, coach, and develop cybersecurity engineers through performance management, career development, and mentoring.
Set team goals, priorities, and KPIs aligned with security and business strategy.
Foster accountability, collaboration, and continuous improvement.
Track and report security metrics, risk indicators, and program maturity to senior leadership.
Champion security awareness across the company and advise senior leadership on cybersecurity matters.
Contribute to the vision and implementation of Workday’s response program.
Architect and evolve a Response platform that enables Cyber Defense to operate with precision, automation, and innovation.
Build automation solutions using open-source and proprietary tools.
Evaluate tools and techniques to develop innovative, practical security solutions.
Partner with risk, legal, and compliance teams to identify, assess, and manage security risks for new and existing initiatives.
Prioritize and drive remediation of security findings across infrastructure, applications, and processes.
Lead or coordinate incident response, including triage, containment, investigation, and post-incident reviews.